F5 security advisories, January 2022

Every F5 security advisory published in January 2022, from F5 SIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 25
Critical: 0
High: 15
In CISA KEV: 0
CVEs: 25

F5 advisories published in January 2022

Jan 25, 2022
High [CVE-2022-23025] On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x
High7.5
Jan 25, 2022
High [CVE-2022-23024] On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x
High7.5
Jan 25, 2022
High [CVE-2022-23022] On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests
High7.5
Jan 25, 2022
High [CVE-2022-23021] On BIG-IP version 16.1.x before 16.1.2
High7.5
Jan 25, 2022
High [CVE-2022-23020] On BIG-IP version 16.1.x before 16.1.2
High7.5
Jan 25, 2022
High [CVE-2022-23019] On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x
High7.5
Jan 25, 2022
High [CVE-2022-23018] On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4
High7.5
Jan 25, 2022
High [CVE-2022-23017] On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x
High7.5
Jan 25, 2022
High [CVE-2022-23016] BIG-IP: On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1
High7.5
Jan 25, 2022
High [CVE-2022-23015] On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4
High7.5
Jan 25, 2022
High [CVE-2022-23013] On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x…
High8.8
Jan 25, 2022
High [CVE-2022-23012] On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5
High7.5
Jan 25, 2022
High [CVE-2022-23011] On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers
High7.5
Jan 25, 2022
High [CVE-2022-23010] On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and…
High7.5
Jan 25, 2022
High [CVE-2022-23009] On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a BIG-IQ managed BIG-IP device
High7.2
Jan 25, 2022
Medium [CVE-2022-23032] BIG-IP: In all versions before 7.2.1.4
Medium5.3
Jan 25, 2022
Medium [CVE-2022-23031] On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML…
Medium4.9
Jan 25, 2022
Medium [CVE-2022-23030] BIG-IP: On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x
Medium5.3
Jan 25, 2022
Medium [CVE-2022-23029] On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and…
Medium5.3
Jan 25, 2022
Medium [CVE-2022-23028] On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x
Medium5.3
Jan 25, 2022
Medium [CVE-2022-23027] On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2
Medium5.3
Jan 25, 2022
Medium [CVE-2022-23026] On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of…
Medium4.3
Jan 25, 2022
Medium [CVE-2022-23023] On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x…
Medium6.5
Jan 25, 2022
Medium [CVE-2022-23014] BIG-IP: On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1
Medium6.5
Jan 25, 2022
Medium [CVE-2022-23008] On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role
Medium5.4

Get an email when F5 publishes the next one.

See F5's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about F5

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.